$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5428d42d-558a-338c-82fc-177b5601c82e.roa File: 5428d42d-558a-338c-82fc-177b5601c82e.roa (raw, json) Hash identifier: XHnEjKHHOk76UQQOykmoXRqKgXrCO3pq+lSylpOVkHE= Subject key identifier: 8A:15:02:FA:6A:1F:D3:11:D7:5C:3A:8C:EE:12:F6:39:B0:74:1C:FE Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584AFEE69F92F09178E80A6C5B80 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5428d42d-558a-338c-82fc-177b5601c82e.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 15092 IP address blocks: 2620:125:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:9f:92:f0:91:78:e8:0a:6c:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=57e8d237-5679-4ddd-9b78-4c8cc8255bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:4a:76:6f:f0:a6:6f:33:cd:00:13:96:3d: 0c:39:73:33:93:2b:e3:49:02:81:5e:d6:c4:9e:19: 33:0e:54:92:5c:80:eb:67:eb:eb:e5:75:b2:9e:2b: 6e:1a:1a:51:4a:88:0c:9b:48:ab:7e:86:57:f5:e5: d4:32:a9:fe:aa:5d:b3:12:ce:e7:dc:28:c3:d0:f0: d3:66:63:9a:61:90:6f:d1:6e:8c:eb:38:94:ae:dc: 55:a6:be:6d:45:44:63:b5:a8:1f:65:58:fd:73:e6: 69:fa:31:96:92:4e:0f:8b:bf:92:b7:cd:25:b5:2c: 71:42:fa:81:6d:db:e5:ce:2a:4e:a7:51:54:cc:e6: f5:64:9d:69:95:e0:d5:1d:dc:0d:a0:c6:84:72:12: b9:a8:a3:f4:b8:db:63:fb:a7:c3:9f:36:be:71:78: 80:a4:6f:1c:b8:e9:b8:6a:52:93:fe:0d:d0:14:b2: ea:d1:bb:18:79:a4:08:98:b3:2b:b2:0b:a4:d5:d1: 05:bd:af:1d:dd:2a:ba:ba:b1:35:ad:a0:4f:75:80: f2:38:8f:2c:f0:8c:1d:10:d3:36:1b:44:55:1e:dd: 80:20:d7:93:01:a0:58:56:9d:ea:6d:ef:31:17:53: 9c:29:2f:5a:91:ba:af:41:15:85:9c:55:08:cf:d2: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:15:02:FA:6A:1F:D3:11:D7:5C:3A:8C:EE:12:F6:39:B0:74:1C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5428d42d-558a-338c-82fc-177b5601c82e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv6: 2620:125:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:93:4d:d4:98:24:d1:13:35:44:7e:09:16:d1:c3:bf:15:26: 27:b9:df:c4:53:ba:e8:47:f4:b2:e8:f7:17:22:f3:c4:26:27: 34:5b:5a:9c:ea:10:90:40:9c:e5:93:36:6d:f6:68:ca:46:7d: ca:b7:95:eb:db:8f:31:47:cb:d8:b1:23:6c:31:99:6f:08:5b: 96:cb:ea:47:5d:f3:43:9b:f9:60:35:90:6b:81:97:bc:6a:e9: 7d:2e:bc:21:6b:9d:b7:5d:d3:92:9c:a0:3b:18:fe:14:29:62: 84:3b:31:64:27:df:a3:ec:07:11:eb:7f:aa:53:1f:39:57:23: 8d:63:78:10:72:46:e3:3c:31:5d:bf:27:2f:8f:61:b7:68:d9: a0:58:47:77:f7:2d:2e:21:44:15:56:4e:cf:de:97:65:86:8a: 39:0d:8f:e1:03:d4:24:d1:c1:a3:57:c8:f8:e5:1a:4e:e5:03: c9:0f:91:89:1a:74:ba:98:49:9c:db:55:6f:d3:a5:33:60:7f: ad:4e:0d:af:8b:66:86:c6:5f:8a:8a:6f:25:36:b2:a2:6d:66: 99:41:f6:01:b1:a6:74:d8:b1:22:47:84:09:ca:a3:c1:11:64: 40:c0:6e:9a:e2:d3:4f:09:b7:d2:07:69:62:00:30:4e:f7:a2: 1f:e5:e2:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr+5p+S8JF46ApsW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NTdlOGQyMzctNTY3OS00ZGRkLTliNzgtNGM4Y2M4MjU1YmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1hKdm/wpm8zzQATlj0MOXMzkyvjSQKBXtbE nhkzDlSSXIDrZ+vr5XWynituGhpRSogMm0irfoZX9eXUMqn+ql2zEs7n3CjD0PDT ZmOaYZBv0W6M6ziUrtxVpr5tRURjtagfZVj9c+Zp+jGWkk4Pi7+St80ltSxxQvqB bdvlzipOp1FUzOb1ZJ1pleDVHdwNoMaEchK5qKP0uNtj+6fDnza+cXiApG8cuOm4 alKT/g3QFLLq0bsYeaQImLMrsguk1dEFva8d3Sq6urE1raBPdYDyOI8s8IwdENM2 G0RVHt2AINeTAaBYVp3qbe8xF1OcKS9akbqvQRWFnFUIz9LFnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIoVAvpqH9MR11w6jO4S9jmwdBz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNTQyOGQ0MmQtNTU4YS0z MzhjLTgyZmMtMTc3YjU2MDFjODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABJbAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEaTTdSYJNETNUR+CRbRw78VJie538RTuuhH9LLo9xci88QmJzRb WpzqEJBAnOWTNm32aMpGfcq3levbjzFHy9ixI2wxmW8IW5bL6kdd80Ob+WA1kGuB l7xq6X0uvCFrnbdd05KcoDsY/hQpYoQ7MWQn36PsBxHrf6pTHzlXI41jeBByRuM8 MV2/Jy+PYbdo2aBYR3f3LS4hRBVWTs/el2WGijkNj+ED1CTRwaNXyPjlGk7lA8kP kYkadLqYSZzbVW/TpTNgf61ODa+LZobGX4qKbyU2sqJtZplB9gGxpnTYsSJHhAnK o8ERZEDAbpri008Jt9IHaWIAME73oh/l4pg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:31 2025 by rpki-client